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AMENDMENTS TO THE CLAIMS 

Claims 1 - 28 (canceled). 

29. (new) A method for verifying a cast ballot B cas t stored in a server, the method comprising: 

forming a digital signature of B cast using a private key of the server DS(B cast , s); 

associating the B cas t and DS(B cas t, s) with a vote serial number VSN; 

forming a confirmation token, comprising DS(B cast , s) and VSN; 

making the token available to a user; 

receiving a confirmation token made available to a user; 

extracting VSN reC eived token and DS reC eived token(B ca st, s) from the received token; and 

for VSN equal to VSN rec eived token, comparing DS rec eived token(B ca st, s) and at least one of 

DS(B cast , s) and DS(B cast , S); 
if the comparison shows equivalence between the data compared, determining that B cast is 

verified. 

30. (new) The method of Claim 29 wherein: 

the confirmation token further comprises a digital signature of the aggregation comprising 

the associated B cast and VSN using the server's private key DS(Aggregation, s), 
extracting DS reC eived token (Aggregation, s) from the received token; and 
B cast is verified only upon the additional condition that DS reC eived token (Aggregation, s) is 
equivalent to DS( Aggregation, s). 
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3 1 . (new) A method for verifying a cast ballot recorded in a server, the method comprising: 
receiving in a server at least one set of: 
a cast ballot B cas t and 

a digital signature of B cas t formed with the private key of a voter casting the ballot 
DS(B cast , v); 

forming: 

a digital signature of B cas t using a private key of the server DS(B cast , s), 
associating B cast , DS(B cast , v), and DS(B cast , s) with a vote serial number VSN; 

forming a confirmation token, comprising: 

DS(B cast , s), DS(B cas t, v), VSN, and DS(Aggregation, s), 
where DS(Aggregation, s) is the digital signature of the aggregation of the 
associated B cast , DS(B cast , v), DS(B cast , s), and VSN; 

making the token available to a user; 

receiving a confirmation token 

extracting VSN reC eived token and at least One Of DS reC eived token(B C ast 5 S), DS reC eived token(B C asb v), 

and DS r eceived token(AG, s) from the received token; and 
for VSN r eceived token and the corresponding VSN, comparing at least one of: 

DS r eceived token (Beast* s ) and DS(B cas t, S); 
DSreceived token(B C ast> v), and DS(B cast , v)j 

DSreceived token(Aggregation, s), and DS(Aggregation, s); 
if comparison shows equivalence between the data compared, determining that B cas t is 
verified. 
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32. The method of Claim 31 further comprising: 

if comparison shows equivalence between DS reC eived token(Aggregation, s), and 

DS(Aggregation, s), determining that the received confirmation token has not 
been modified since its formation. 

33. A method for verifying a cast ballot recorded in a server, the method comprising: 

receiving a cast ballot ("Beast") in a server; 

forming a digital signature of B cast using a private key of the server ("DS(B cas t , s)"), 
associating B cast and DS(B cas t , s) with a vote serial number ("VSN"); 
for VSN, comparing DS(B cast , s) and DS(B cast , S), 

if comparison shows equivalence between the data compared, determining that B cas t is 
verified. 
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